Show commands
mka-over-ip
Syntax
mka-over-ip
Context
show>anysec
Description
This command displays MKA-over-IP information.
Output
The following output is an example of MKA over IP information, and MKA over IP field descriptions describes the fields.
Output example*A:Sar18 Dut-B>show>anysec# mka-over-ip#
===============================================================================
MKA over IP
===============================================================================
MKA over IP session UDP Port: 12345
Reserved Label Block : (Not Specified)
Operational Status : in-service
===============================================================================|
Label |
Description |
|---|---|
|
MKA over IP session UDP Port |
The MKA-over-IP UDP port number |
|
Reserved Label Block |
The reserved label block |
|
Operational Status |
The operational status |
tunnel-encryption
Syntax
tunnel-encryption encryption-group group-name [peer ip-address | ipv6-address] [detail] [mka-session]
tunnel-encryption encryption-group group-name [peer ip-address | ipv6-address] [statistics] [mka-session]
tunnel-encryption [detail] [mka-session]
tunnel-encryption [statistics] [mka-session]
Context
show>anysec
Description
This command displays ANYsec tunnel encryption information.
Parameters
- group-name
- specifies the encryption group name, up to 32 characters
- ip-address
- specifies the IPv4 address
- ipv6-address
- specifies the IPv6 address
- detail
- keyword to specify the detailed tunnel encryption group information
- mka-session
- keyword to specify MKA session information
- statistics
- keyword to specify MKA statistical information
Output
The following output is an example of tunnel encryption information, and Tunnel encryption field descriptions describes the fields.
Output example - detail*A:7705:Dut-C# show anysec tunnel-encryption encryption-group "isisEncrGroup" detail
===============================================================================
Encryption Group: isisEncrGroup
===============================================================================
Group Admin State : Up
CA Name : isisCA
Local Encryption Label : 50003
Security Termination Policy: isisPolicy
Policy Admin State : Up
Policy Protocol : sr-isis
Policy IGP Instance ID : 0
Policy FlexAlgo ID : 0
Local Address : 10.20.1.3
Rx Must Be Encrypted : Yes
Terminating Label : 22003
-------------------------------------------------------------------------------
Peer 10.20.1.6 configuration
-------------------------------------------------------------------------------
Peer Admin State : Up
Peer Protocol : sr-isis
Peer IGP Instance ID : 0
Peer FlexAlgo ID : 0
Peer Tunnel ID : 524295
Peer Encryption Label : 50006
Last Inconsistent Rx SCI: 0000000000000000
Peer Oper State : Down
Peer Oper Down Reason : mka-down
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
SC stats for peer 10.20.1.6
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
txSCSecyStats
-------------------------------------------------------------------------------
Tx SCI : 00000000c3530001
Encrypted Packets : 1653
Encrypted Octets : 674424
Enqueue Errors : 0
Other Errors : 0
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
rxSCSecyStats
-------------------------------------------------------------------------------
Rx SCI : 00000000c3560001
Delay Packets : 0
Not Valid Packets : 0
Unchecked Packets : 0
OK Packets : 0
Decrypted Octets : 0
Enqueue Errors : 0
Other Errors : 0
-------------------------------------------------------------------------------
===============================================================================
*A:7705:Dut-C#*A:7705:Dut-C# show anysec tunnel-encryption encryption-group "isisEncrGroup" statistics
===============================================================================
Encryption Group: isisEncrGroup
===============================================================================
-------------------------------------------------------------------------------
SC stats for peer 10.20.1.6
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
txSCSecyStats
-------------------------------------------------------------------------------
Tx SCI : 00000000c3530001
Encrypted Packets : 1653
Encrypted Octets : 674424
Enqueue Errors : 0
Other Errors : 0
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
rxSCSecyStats
-------------------------------------------------------------------------------
Rx SCI : 00000000c3560001
Delay Packets : 0
Not Valid Packets : 0
Unchecked Packets : 0
OK Packets : 0
Decrypted Octets : 0
Enqueue Errors : 0
Other Errors : 0
-------------------------------------------------------------------------------
===============================================================================|
Label |
Description |
|---|---|
| Group Admin State | The encryption group administrative state |
| CA Name | The connectivity association name |
| Local Encryption Label | The local encryption label |
|
Security Termination Policy |
The security termination policy name |
| Policy Admin State | The policy administrative state |
| Policy Protocol | The policy protocol |
| Policy IGP Instance ID | The policy IGP instance ID |
| Policy FlexAlgo ID | The policy flexible algorithm ID |
| Local Address | The local IP address |
| Rx Must Be Encrypted | Indicates all arriving traffic must be encrypted or is discarded |
| Terminating Label | The terminating label |
| Peer <IP address> configuration | |
| Peer Admin State | The peer administrative state |
| Peer Protocol | The peer protocol |
| Peer IGP Instance ID | The peer IGP instance ID |
| Peer FlexAlgo ID | The peer Flex Algo ID |
| Peer Tunnel ID | The peer tunnel ID |
| Peer Encryption Label | The peer encryption label |
| Last Inconsistent Rx SCI | The last inconsistent receive SCI value |
| txSCSeyStats | |
| Tx SCI | The transmit SCI value |
| Encrypted Packets | The number of encrypted packets |
| Encrypted Octets | The number of encrypted octets |
| rxSCSeyStats | |
| Rx SCI | The receive SCI value |
| Delayed Packets | The number of delayed packets |
| Not Valid Packets | The number of invalid packets |
| Unchecked Packets | The number of unchecked packets |
| OK Packets | The number of OK packets |
| Decrypted Octets | The number of decrypted octets |